CVE-2026-9680

CVSS Score & Metrics

Base Score

5.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N                                    

Vulnerability Description

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.

Vulnerability Details

Published Date

July 28, 2026

Last Modified

July 28, 2026

CWE ID

CWE-1188

Source

NVD

External References

https://github.com/aliyun/alibabacloud-rds-openapi-mcp-server

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment